Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89253EAEDC8211EF885656AC762E951A.roa
File: 89253EAEDC8211EF885656AC762E951A.roa (raw, json)
Hash identifier: tzxKYJ4mRw5VZws/mEfgSviMoUDZ73QCkMJTSfvmFtk=
Subject key identifier: CA:F0:65:94:1A:D5:72:EC:81:A3:0E:82:F3:BA:01:F0:73:81:B4:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011483
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89253EAEDC8211EF885656AC762E951A.roa
Signing time: Mon 27 Jan 2025 07:44:28 +0000
ROA not before: Mon 27 Jan 2025 07:44:24 +0000
ROA not after: Tue 04 Mar 2025 07:44:24 +0000
asID: 138995
IP address blocks: 45.192.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70787 (0x11483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 07:44:24 2025 GMT
Not After : Mar 4 07:44:24 2025 GMT
Subject: CN=6797395c-24d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:17:d6:e4:be:25:83:08:e0:aa:d4:a1:14:
62:36:53:59:70:a4:2b:bc:ca:61:d5:a7:17:5d:89:
92:96:9c:6b:a0:7b:99:67:f7:f9:75:5f:b7:40:96:
35:78:61:62:0a:60:56:fa:c5:6b:f6:f5:0f:e2:74:
69:6e:8f:5f:35:20:63:cd:ae:00:97:50:70:b7:cb:
ed:33:ed:b0:36:44:61:3a:81:4f:36:c5:7b:19:4e:
0b:7c:06:8d:b4:8f:7c:1f:39:f6:a8:d5:86:b2:4b:
e1:d6:41:58:a4:79:26:8a:6c:7b:3d:d1:64:cc:44:
25:13:d7:0b:fa:bf:bd:bb:e3:b2:89:03:f9:8f:61:
4f:c8:2b:81:8e:33:24:dd:e8:02:eb:00:03:e3:3b:
48:3b:da:d3:ef:18:64:fe:c6:12:22:6d:91:af:00:
02:1a:7f:5c:c4:31:d5:55:cd:a7:19:cb:c3:9f:bf:
f8:7d:52:22:da:29:8b:de:1e:1f:ff:6b:a0:64:5e:
c3:3b:8e:7d:bd:6e:db:1b:83:c7:68:ad:9f:b4:9d:
3d:ac:ae:0c:f8:f0:39:8c:16:af:08:5d:36:8c:20:
8d:7b:45:2e:1c:24:ba:2f:4b:4c:8b:aa:93:ad:28:
ca:e4:a5:66:1f:93:3e:73:c6:07:6f:ae:b9:b1:5a:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:65:94:1A:D5:72:EC:81:A3:0E:82:F3:BA:01:F0:73:81:B4:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89253EAEDC8211EF885656AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
26:47:13:a2:82:3d:4f:aa:bb:5b:05:a3:b4:8d:08:2b:42:c4:
a6:e6:25:d4:79:8c:40:e1:87:de:32:c6:46:63:62:5e:82:8a:
1b:f4:e3:ab:19:35:41:85:b9:46:c3:71:09:d5:66:c5:5f:f1:
db:8c:6b:6a:5d:f8:7f:78:a2:9d:ff:07:d1:1c:3a:37:45:27:
0a:37:f8:1f:92:1f:8a:3c:ab:72:c2:12:9d:6b:6c:cc:7b:4e:
24:90:4b:f4:0c:f4:a3:c9:2b:11:b2:2a:6a:97:23:4d:39:28:
ff:23:5e:1d:6f:52:d1:d4:cf:7e:a2:e6:6d:50:f9:aa:fc:7d:
c8:36:82:6f:3b:eb:3f:a6:bf:f0:37:92:66:dc:52:92:7e:dc:
80:a7:f0:bc:a1:e0:5e:e0:27:cc:c9:fe:0a:50:cc:75:95:33:
f9:41:22:b5:6c:c1:07:31:31:47:4a:d5:67:45:07:e5:81:43:
62:d9:66:8a:fa:6f:68:bf:b4:be:77:d5:cf:d0:a0:9d:59:86:
ff:16:84:9b:06:6c:0f:04:cd:8d:62:39:e6:3b:24:97:a0:71:
05:ad:e0:55:b1:9d:52:6c:68:be:b7:fe:ee:00:e7:a4:75:81:
3f:7c:3f:a6:50:b0:97:05:72:82:d0:d8:bc:ee:ea:11:7b:c2:
21:21:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:04 2025 by rpki-client